Page 15, 



line 9, change "part 34" to -part 347- 



IN THF CA AIMS: 

Kindly cancel existing claims 1-13 and add the following new claims: 




° J 1 --14. A cryptographic device which ^ncrypts input data by 
sequentially processing it by a plurality of/round processing which 
nonlinearly transforms it using extended ikey, comprising: 

an initial splitting part which/splits said input data to two pieces 
of block data; 

a key storage part for stodng extended key; 
a plurality of cascade-connected round processing parts which 
are supplied with said two pieces of block data and sequentially process 
them using said extended key; anc 

a final combining paruwhich combines two pieces of block data 
output from the last round of said plurality of cascade-connected round 
processing parts into a single p/ece of data and outputs it; 



comprises: 



wherein each of said plurality of round processing part 



a non-linear function part which transforms one of two pieces of 
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block data input thereto from the preceding stage, depending on extended 
key stored in said key storage part; 

a linear operation part Which linearly operates the output data 
from said nonlinear function part arad the other of said two pieces of block 



data; and 



a swapping part which; swaps the output data from said linear 



operation part and the input block data to said nonlinear function part and 

provides the two pieces of swapped data as two pieces of input block data 

to said round processing part of/the next round; and 

wherein said nonlinear function part comprises: 

a key-dependent limear transformation part which linearly 

transforms input data based cm extended key stored in said key storage 

part to thereby generate transformed data; 

a splitting part which split the transformed data from said key- 



dependent linear transformation part to a plurality of bit strings; 
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a plurality of first nonlinear transformation parts which 
nonlinearly transform said plurality of pit strings, respectively, and output 
transformed data; 

a first linear transformation part which linearly transforms said 
transformed data from said plurality of first nonlinear transformation parts 
in association with each other and/outputs a plurality of pieces of 
uniformed data to a plurality of roiites, respectively; 

a second nonlinear transformation part provided in at least one 
of said plurality of routes, for nonlinearly transforming said transformation 
parts, and for outputting the transformed data as data of that route; and 

a combining part wrlich combines data from said plurality of 
routes into output data of said nonlinear function part. 



15. The cryptographic/ device of claim 14, wherein said first linear 
transformation part comprises a key-dependent linear operation part which 
linearly transforms said plurality of pieces of uniformed data based on 
extended key stored in said/key storage part and outputs the plurality of 
transformed data as data of said plurality of routes. 
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16. The cryptographic device of claim 1 5, further comprising a 
second linear transformation part whion linearly transforms the output data 
from said combining part to provide tr/e output data of said nonlinear 
function part. 
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17. The cryptographic device of claim 16, wherein said second 
linear transformation part is a linear transformation part which performs a 
linear transformation base don emended key stored in said key storage 
part. 



18. The cryptographic device of claim 17, wherein said first linear 
transformation part comprises at least one exclusive OR circuit provided in 
each of said plurality of routes,/ for outputting said uniformed data to said 
each route by an exclusive-OFji operation of data of said each route and 
data of other routes. 



19. The cryptographic device of claim 14, further comprising a 
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second linear trans 



of said combining part to provide the transformed data as output data of 



said nonlinear func 



formation part which linearly transforms the output data 



ion part. 



20. The cryptographic device of claim 19, wherein said second 
linear transformation part is a linear transformation part which performs a 
linear transformation based on extended key stored in said key storage 
part. 



21 . The cryptographic device of claim 19, wherein said first linear 
transformation part comprises at least one exclusive OR circuit provided in 
each of said plurality of routes, for outputting said uniformed data to said 
each route by an exclqisive-OR operation of data of said each route and 
data of other routes. 



22. The cryptographic device of any one of claims 14 through 21 , 
further comprising an initial linear transformation part which linearly 



transforms said input data and supplies it to said initial splitting part. 
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23. The cryptographic device of claim 22, wherein said initial linear 
transformation part is a transfc rmation part which performs a linear 
transformation based on exterded key stored in said key storage part. 



24. The cryptographic 



final combining part to provide 



25. The cryptographic 



device of claim 23, further comprising a final 



linear transformation part which linearly transforms the output data of said 



it as the output of said cryptographic device. 



device of claim 24, wherein said final linear 



transformation part is a transf Drmation part which performs a linear 
transformation based on extended key stored in said key storage part. 



26. The cryptographic device of claim 22, further comprising a final 
linear transformation part whic h linearly transforms the output data of said 
final combining part to provide it as the output of said cryptographic device. 

27. The cryptographic device of claim 26, wherein said final linear 
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transformation part is a transformation part which performs a linear 
transformation based on extended key stored in said key storage part. 



28. The cryptographic device of claim 26, wherein said plurality of 
routes are first, second, third and fourth routes arranged in this order. 
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29. The cryptographic device of claim 28, wherein said second 
nonlinear transformation part is provided in each of said four routes. 



30. The cryptograph ic device of claim 28, wherein said second 
nonlinear transformatio/i part is provided in each of said first and fourth 
routes. 



31 . The crypiographic device of claim 30, wherein said first linear 
transformation part /comprises: 

a first exclusive OR circuit provided in said second route, for 
carrying out the ekclusive-OR between data of said first route and data of 
said second route; 
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a second exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR betweep data of said fourth route and data of 
said third route; 

a third exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between the output of said second exclusive- 
OR circuit and the output of said first exclusive-OR circuit; 

a fourth exclusive-OFucircuit provided in said second route, for 
carrying out the exclusive OR between the output of said first exclusive-OR 
circuit and the output of said third exclusive-OR circuit; 

a fifth exclusive-OR circuit provided in said first route, for 
carrying out the exclusive OR between the output of said first exclusive-OR 
circuit and the output of said fourth exclusive-OR circuit; 

a sixth exclusive-OR circuit provided in said fourth route, for 
carrying out the exclusive OR between the data of said fourth route and the 
output of said third exclusive-OR circuit. 



32. The cryptographic device of claim 23, wherein said plurality of 
routes are first, second, third and fourth routes arranged in this order. 
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33. The cryptographic device of claim 32, wherein said second 
nonlinear transformation part is provided in each of said four routes. 



34. The cryptographic 



device of claim 32, wherein said second 



nonlinear transformation part ifs provided in each of said first and fourth 
routes. 



35. The cryptographic device of claim 34, wherein said first linear 
transformation part comprise s 

a first exclusive OR circuit provided in said second route, for 
carrying out the exclusive-C|R between data of said first route and data of 
said second route; 

a second exclusive-OR circuit provided in said third route, for 
carrying out the exclusive <pR between data of said fourth route and data of 
said third route; 

a third exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between the output of said second exclusive- 
OR circuit and the output pf said first exclusive-OR circuit; 
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a fourth exc 



usive-OR circuit provided in said second route, for 



carrying out the exclusive OR between the output of said first exclusive-OR 
circuit and the output of 



said third exclusive-OR circuit; 
ve-OR circuit provided in said first route, for 



a fifth exclus 



carrying out the exclusive OR between the data of said first route and the 
output of said fourth exclusive-OR circuit; and 

a sixth excluslve-OR circuit provided in said fourth route, for 
carrying out the exclusivelOR between the data of said fourth route and the 
output of said third exclusive-OR circuit. 



36. The cryptographic device of claims 25, wherein said plurality of 
routes are first, second, thirll and fourth routes arranged in this order. 



37. The cryptographic- device of claim 33, wherein said second 
nonlinear transformation part is provided in each of said four routes. 



38. The cryptographic device of claim 33, wherein said second 
nonlinear transformation part is provided in each of said first and fourth 



routes. 

3fl. The cryptographic device of claim 35, wherein said first linear 
transformation part comprises; 

\ a first exclusive OR circuit provided in said second route, for 
carrying ou\ the exclusive-OR between data of said first route and data of 
said second route; 

a second exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between data of said fourth route and data of 
said third route;\ 

a thiroj exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between the output of said second exclusive- 
OR circuit and the output of said first exclusive-OR circuit; 

a fourth exclusive-OR circuit provided in said second route, for 
carrying out the exclusive OR between the output of said first exclusive-OR 
circuit and the output oii said third exclusive-OR circuit; 

a fifth exclusVe-OR circuit provided in said first route, for 
carrying out the exclusive\OR between the data of said first route and the 
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output of said fourth exclusive-OR circuit; and 

\ 

a sixth\exclusive-OR circuit provided in said fourth route, for 
carrying out the exclusive OR between the data of said fourth route and the 
output of said third exclusive-OR circuit. 



40. The ci-yptbgraphic device of any one of claims 14 through 21 
further comprising a f nal linear transformation part which linearly 



transforms the outpu 



data of said final combining part to provide it as the 



output of said cryptographic device. 

41 . The cryptographic device of claim 40, wherein said final linear 
transformation part is altransformation part which performs a linear 
transformation based on extended key stored in said key storage part. 

42. The cryptographic device of claim 40, wherein said plurality of 
routes are first, second, trwrd and fourth routes arranged in this order. 



43. The cryptographic device of claim 42, wherein said second 
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nonlinear transformation part is provided in each of said four routes. 



44. The cryptographic device of claim 42, wherein said second 
nonlinear transformation part is provided in each of said first and fourth 
routes. 



45. The cryptog 



aphic device of claim 44, wherein said first linear 



transformation part comprises: 



a first exclus ive OR circuit provided in said second route, for 



carrying out the exclusiv 
said second route; 



e-OR between data of said first route and data of 



a second ex<flusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between data of said fourth route and data of 
said third route; 

a third exclustye-OR circuit provided in said third route, for 
carrying out the exclusive UR between the output of said second exclusive- 
OR circuit and the output or said first exclusive-OR circuit; 

a fourth exclusive-OR circuit provided in said second route, for 
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carrying out the exclusive OR between the output of said first exclusive-OR 



circuit and the outpu 



of said third exclusive-OR circuit; 



a fifth exdlusive-OR circuit provided in said first route, for 
carrying out the exclusive OR between the data of said first route and the 
output of said fourth exclusive-OR circuit; and 

a sixth exclusive-OR circuit provided in said fourth route, for 
carrying out the exclusive OR between the data of said fourth route and the 
output of said third exolusive-OR circuit. 



46. The cryptographic device of any one of claims 14 through 21 , 
wherein said plurality of routes are first, second, third and fourth routes 
arranged in this order. 



47. The cryptographic device of claim 46, wherein said second 
nonlinear transformation part is provided in each of said four routes. 



48. The cryptographic device of claim 46, wherein said second 



nonlinear transformation part is provided in each of said first and fourth 
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49. The cryptographic device of claim 48, wherein said first linear 
transformation part comprises: 

\ a first exclusive Or circuit provided in said second route, for 
carrying ouithe exclusive OR between data of said fourth route and data of 
said third route; 

a third exclusive-OR circuit provided in said third route, for 
carrying out the exclusive OR between the output of said second exclusive- 
OR circuit and the output of said first exclusive-OR circuit; 

a fourth circuit-OR circuit provided in said second route, for 
carrying out the exclusive OR between the output of said first exclusive-OR 
circuit and the output of said third exclusive-OR circuit; 

a fifth exolusive-OR circuit provided in said first route, for 
carrying out the exclusive OR between the data of said first route and the 
output of said fourth exclusive-OR circuit; and 

a sixth exclusive-OR circuit provided in said fourth route, for 
carrying out the exclusive OR between the data of said fourth route and the 



